Payments Report 2026

How safe, efficient and accessible are payments?

To the report's start page
How safe, efficient and accessible are payments?

The payments market is generally safe but fraud and money laundering are problems

Swedish payments are generally safe. They reach the recipient and there is a high level of protection for individuals' sensitive authentication and payment data. At the same time, fraud has been a major problem in recent years. This risks not only causing financial losses for the individual, but also weakening public confidence in the payments market. The security of the financial sector, and thus trust in it, can also be affected by the fact that some payment methods – such as cash and crypto-assets like stablecoins – are difficult to trace and are therefore used for various criminal purposes.

Published: 12 March 2026

Fighting fraud is a high priority

The work on combating fraud is given high priority by market participants as well as by the Government and public authorities. For example, in May 2024, banks, through Finance Sweden, presented a package of measures to increase their customers' protection against fraud.[88] Banker stärker kundskyddet mot bedrägerier ytterligare (Finance Sweden, Swedish only). The measures include the possibility for the consumer to impose limits and time delays on certain transactions.

Since 2024, fraudsters have been taking less and less money with them when they do succeed, and Finance Sweden believes that these measures have had an effect. At the same time, the number of frauds remains at historically high levels, according to both the Finansinspektionen and the Swedish Police.[89] Minskade förluster vid bedrägerier via betaltjänster (Finansinspektionen, Swedish only) and Anmälda brott (Reported crimes) (Swedish National Council for Crime Prevention, BRÅ), retrieved 16-12-2025. Finansinspektionen therefore encourages banks and other payment service providers to continue working to protect their customers. The Riksbank agrees with this call.

Fraud is not only a problem in Sweden, but also in other countries. Payment fraud has continued to rise in Europe, according to a December 2025 report produced annually by the European Central Bank (ECB) and the European Banking Authority (EBA). As in previous reports, the ECB and the EBA emphasise that the requirement for so-called strong customer authentication in the EU is an effective protection against fraud, especially card fraud. At the same time, they highlight that fraud via social engineering has increased – not least in account transfers. Developments in the EEA are thus similar to those in Sweden, and the ECB and the EBA also urge the relevant actors to continue their efforts to combat fraud.[90] 2025 Report on Payment Fraud (EBA and ECB).

A limit on cash payments could discourage some crime

Payment fraud is mostly carried out using digital payment methods. But cash can also be used for criminal purposes. Since one can pay anonymously with cash, it can be used for money laundering or other criminal activities, for instance. Money laundering involves concealing the fact that money derives from criminal activities and making it appear legitimate. For example, criminals can get rid of large sums of cash derived from criminal activities by buying luxury products. In addition, large cash transactions make it easier to avoid taxes. At the same time, the ability to pay in cash is important – both for contingency reasons and for people who, for various reasons, are unable, unwilling or not allowed to use digital payment services.

In last year's Payments Report, the Riksbank recommended the introduction of a maximum amount limit for cash payments. Sweden currently has no limit, as long as businesses can fulfil the customer due diligence requirements for customers making cash payments over 5,000 euros. However, when the EU Anti-Money Laundering Regulation enters into force in July 2027, a maximum amount for cash payments across the EU of EUR 10,000 (equivalent to approximately SEK 110,000) will be introduced. However, it will be possible for member states to adopt lower thresholds for cash purchases. Such lower thresholds already exist in about half of the EU Member States. Denmark has a limit of DKK 15,000 (equivalent to around SEK 21,500) and France, Spain and Italy have a maximum of EUR 1,000 (equivalent to around SEK 11,000).

The Riksbank considers that Sweden should introduce a maximum amount limit of SEK 10,000 for cash payments in retail trade[91] Regulation (EU) 2024/1624 of the European Parliament and of the Council provides that persons trading in goods or providing services may only receive or make a cash payment up to an amount of EUR 10,000 or its equivalent in national or foreign currency, regardless of whether the transaction is carried out on a single occasion or on several occasions which appear to be linked. However, this does not apply to payments between natural persons not acting in their professional capacity, or to banks, electronic money issuers or payment service providers. in connection with the entry into force of the new Anti-Money Laundering Regulation, which you can read more about in section “A limit of SEK 10,000 should be introduced for cash purchases in the retail sector”. The Riksbank's estimate based on survey data is that transactions with cards for amounts over SEK 10,000 account for less than 1 per cent of all retail payments. For cash payments, the share is likely to be significantly lower. A limit of SEK 10,000 for cash payments in the retail trade is also well in line with the maximum limit in several other European countries.

Stablecoins and other crypto-assets can be used for criminal purposes

Digitalisation has led to the development of new types of digital assets. One example is crypto-assets, such as Bitcoin and stablecoins. Recently, stablecoins have received a lot of attention, which you can read more about in section “New forms of money are being developed” and in the article Money in transition – traditional and new forms.

Stablecoins are issued on decentralised platforms that are not controlled by any central player. This makes it difficult to know who is holding stablecoins and what transactions are being made by whom. For example, information on holders is not held by the issuer but by wallet providers or trading platforms such as crypto exchanges. Self-custodial wallets are also sometimes used, where the user controls his or her own assets without any external actor having insight into who owns them.

Transactions in stablecoins are normally recorded on a blockchain. An open blockchain shows these transactions but without any direct link to the identity of the entity making the transaction. This makes it difficult to track them and intervene in cases of suspected criminal activity. Moreover, many actors, both issuers and trading platforms, are based outside the EU, which further limits the possibilities for Swedish authorities to supervise and take action. As a result, there is a risk of stablecoins being used for illegal purposes such as money laundering, terrorist financing and drug trafficking.[92] Financial Stability Report 2025:2 (Riksbank).

FACT BOX – New payment services framework

In November 2025, the European Parliament and the European Council reached a provisional political agreement on new regulations for payment services, including a new Payment Services Regulation (PSR)[93] PSR mainly contains consumer protection provisions, for instance with regard to field of application, execution of payment services, requirements for information when supplying payment services, responsibility for unauthorised transactions, processing of personal data and access to the payments system. and a third Payment Services Directive (PSD3)[94] PSD3 largely contains provisions aimed at institutions with regard to licensing and supervision of payment institutions. . The amendments essentially transfer key provisions of the EU's Second Payment Services Directive (PSD2) to the EU regulation. While EU regulations are directly applicable in the Member States, directives have to be transposed into Member States' national legislation.

The new rules aim, among other things, to further strengthen consumer protection by combating payment fraud (including so-called spoofing fraud) by enabling payment service providers to exchange data with each other in order to detect and counter fraud. It also introduces stricter requirements for payment service providers to use transaction monitoring to better detect and prevent fraud. This allows them to analyse transaction patterns based on the consumer's usual payment habits and detect anomalies that may indicate fraud.[95] Faktapromemoria Ändringar i regelverket för betaltjänster (Government, Swedish only).  To reduce the risk of incorrect payments and make fraud more difficult, payment service providers should also offer a service that allows the consumer to verify the identity of the payee before authorising a payment (Verification of Payee), which was previously introduced for payments in euro by the Instant Payments Regulation. You can read more about the regulation in section “Modernising the payments market”.

The new regulatory framework will also strengthen the transparency of charges so that all costs, including any exchange fees and withdrawal fees, must be disclosed before a payment is made. This means, for example, that ATMs must display any charges for withdrawals and exchanges before you withdraw the money or make the exchange. The regulatory framework also aims to promote competition, for example by prohibiting banks from discriminating against open banking services, such as services that allow third-party providers to access customers’ account information and initiate payments with the customer's consent. Users should be given an overview and be able to decide which actors have access to their data. To improve access to cash, the possibility to withdraw cash in shops is being introduced; up to a certain amount without a purchase requirement and without the shop needing a payment services licence.

The next step is for the European Parliament and the European Council to formally approve the agreement before it can enter into force.